Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
1994-02-24 CVE-1999-0338 Unspecified vulnerability in IBM AIX 3.2.4/3.2.5
AIX Licensed Program Product performance tools allow local users to gain root access.
local
low complexity
ibm
7.2
1993-12-16 CVE-1999-0334 Unspecified vulnerability in SUN Solaris and Sunos
In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access.
local
low complexity
sun
7.2
1993-09-30 CVE-1999-0145 Unspecified vulnerability in Eric Allman Sendmail
Sendmail WIZ command enabled, allowing root access.
local
low complexity
eric-allman
7.2
1993-09-17 CVE-1999-1318 Unspecified vulnerability in SUN Sunos
/usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allows local users to gain privileges via Trojan horse programs.
local
low complexity
sun
7.2
1993-04-22 CVE-1999-1216 Unspecified vulnerability in Cisco Router
Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should normally be denied using the "no ip source-route" command.
network
low complexity
cisco
7.5
1993-02-24 CVE-1999-1312 Unspecified vulnerability in DEC Openvms AXP and DEC Openvms VAX
Vulnerability in DEC OpenVMS VAX 5.5-2 through 5.0, and OpenVMS AXP 1.0, allows local users to gain system privileges.
local
low complexity
dec
7.2
1993-02-03 CVE-1999-1507 Unspecified vulnerability in SUN Sunos
Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directories such as crash.
local
low complexity
sun
7.2
1992-12-30 CVE-1999-1021 Unspecified vulnerability in SUN Sunos 4.1/4.1.1/4.1.2
NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0, as fixed by the NFS jumbo patch upgrade.
local
low complexity
sun
7.2
1992-12-10 CVE-1999-1466 Unspecified vulnerability in Cisco IOS
Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists are used on certain interfaces, the IP route cache is enabled, and the access list uses the "established" keyword.
network
low complexity
cisco
7.5
1992-12-10 CVE-1999-1306 Unspecified vulnerability in Cisco IOS
Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword is set, which could allow attackers to bypass filters.
network
low complexity
cisco
7.5